PT-2026-132852

Name of the Vulnerable Software and Affected Versions joserfc versions prior to 1.7.6 Description In the compact JWS deserialization process, the library calls bytes.split before enforcing aggregate segment-size limits. When attacker-controlled compact serialization bytes are processed by the...